IT Risk Manager | Technology Risk | Cybersecurity | Compliance | Audit

AVENSYS CONSULTING INC.; Quezon City; Hybrid; PHP 1,116,000 - 2,009,000; Full time

Job summary

AVENSYS CONSULTING INC. is seeking a seasoned PCI Compliance and IT Risk Management leader in a hybrid setup in the Philippines. You will oversee day-to-day PCI compliance and risk management activities, guide risk assessments, and collaborate with diverse stakeholders to ensure regulatory alignment and robust controls.

The role requires 4–6 years in PCI compliance and IT risk, plus at least 2 years of people leadership, with a focus on governance and continuous improvement across teams.

Qualifications

• Bachelor's degree in Information Security or related field.
• 4–6 years of experience in PCI compliance, IT risk management, information security, or related areas.
• At least 2 years of experience leading or coaching team members.
• Experience supporting risk assessments, control reviews, and audits.
• Strong understanding of risk management and internal controls.

Responsibilities

• Lead day-to-day PCI Compliance and IT Risk Management activities.
• Manage team priorities, workloads, and deliverables.
• Provide coaching and development opportunities to team members.
• Guide risk assessments, control reviews, and remediation activities.
• Collaborate with cross-functional stakeholders to address risks.

Skills

PCI compliance

IT risk management

Information security

Risk management

Stakeholder management

Communication skills

Leadership

Team coaching

Detail orientation

Problem solving

Education

Bachelor's degree in InfoSec

Job description

Work Arrangement: Hybrid - 3x WFH & 2x WFO Weekly

Work Shift: Graveyard Shift

Work Location: Vertis North, QC

What You'll Bring

• Bachelor's degree in Information Security, Cybersecurity, Information Technology, Risk Management, or a related field, or equivalent relevant experience.
• 4–6 years of experience in PCI compliance, IT risk management, information security, technology risk, regulatory compliance, audit, governance, or related areas.
• At least 2 years of experience managing, leading, coaching, or developing team members.
• Experience supporting risk assessments, control reviews, compliance activities, audits, or governance processes.
• Strong understanding of risk management principles, information security concepts, and internal controls.
• Strong attention to detail, organizational skills, and the ability to manage multiple priorities in a structured and controlled environment.
• Strong written and verbal communication skills, including the ability to present information and collaborate effectively with diverse stakeholders.
• Ability to follow established processes while exercising sound judgment when identifying, escalating, and resolving issues.
• Demonstrated ownership, execution discipline, and the ability to deliver high-quality work within established timelines.
• Strong stakeholder management and collaboration skills, particularly within cross-functional and global environments.

What You'll Own

Team Leadership & People Management

• Lead and oversee the day-to-day activities of the PCI Compliance and IT Risk Management team.
• Manage team priorities, workloads, and deliverables to ensure commitments are completed accurately and on time.
• Provide coaching, guidance, training, and development opportunities to team members.
• Delegate responsibilities effectively while maintaining appropriate oversight and quality standards.
• Foster a collaborative, accountable, and high-performing team culture.
• Support employee development, performance management, and continuous improvement across the team.

PCI Compliance & Payment Security

• Serve as a subject matter resource for PCI compliance and payment security requirements.
• Monitor relevant regulatory requirements, industry developments, and emerging risks that may impact the business.
• Support compliance with payment network and card industry requirements, including those of Visa, Mastercard, American Express, and Discover.
• Identify potential compliance gaps, assess associated risks, and elevate significant issues to management and relevant stakeholders.
• Provide guidance to business and technology teams on compliance considerations and practical solutions.

IT Risk Management

• Support and conduct technology and cybersecurity risk assessments across relevant systems, processes, and initiatives.
• Perform control reviews, risk analysis, and assessments to identify potential vulnerabilities and areas for improvement.
• Work with stakeholders to document risks, controls, remediation activities, and action plans.
• Prepare clear risk assessments, reports, and recommendations for management and key stakeholders.
• Monitor risk mitigation activities and support the timely resolution of identified issues.

Stakeholder Partnership & Governance

• Partner with Technology, Information Security, Legal, Compliance, Operations, and other business teams to support risk and compliance initiatives.
• Help ensure technology and business solutions align with applicable compliance, risk, and business requirements.
• Facilitate discussions with stakeholders to identify requirements, address risks, and resolve compliance-related issues.
• Support the development and maintenance of policies, procedures, documentation, and governance processes.
• Communicate complex compliance and risk matters clearly to both technical and non-technical stakeholders.

It’s a Bonus If You Have

• Knowledge of PCI DSS and payment card industry standards.
• Understanding of payment security requirements and cardholder data protection.
• Familiarity with information security concepts, including access controls, encryption, identity management, and data protection.
• Experience with risk and compliance frameworks such as ISO 27001, NIST, COBIT, or similar standards.
• Experience supporting internal or external audits, evidence collection, compliance assessments, or remediation activities.
• Experience working with payment networks or within the payments, financial services, fintech, or regulated technology industries.
• Proficiency in Microsoft Office tools, particularly Excel and PowerPoint.
• Relevant certifications such as PCI-P, CRISC, Security+, CISSP, or similar credentials.